Skip to content
Search
Get A Demo
Free SIEM
    Get A Demo
    Free SIEM

      SIEM Detection Test: Honeypot – FTP Auth Test

      Detecting when a Honypot is accessed is important to detect lateral movement across your environment. We recommend that SIEMs should be tested for honeypot detection to ensure the detection of lateral movement which could originate from both employees and external bad actors.

      How to Test Your Honeypot for Lateral Movement via FTP Auth

      Prerequisites
      • Blumira Sensor is deployed
      • Honeypot Module is configured
      FTP Test
      1. Open a CMD Prompt as an Administrator that can communicate with the sensor over port 21
      2. Type the following:
        • FTP
        • open<ip_address of the sensor>
        • Add in username & password
      3. Within minutes, a finding (alert) will populate in the responder dashboard in Blumira

      Get Started for Free

      Experience the Blumira Free SIEM, with automated detection and response plus compliance reports for 3 cloud connectors, forever.

      Sign Up